$ rpki-client -vvvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: WE3sWanQ0+Saxncv1NI32bDIEZDgRDhFTSHY0xNywjQ= Subject key identifier: A8:CA:B0:95:C2:84:BE:66:A5:56:A4:38:45:1C:62:B2:0C:27:03:50 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 0808 Signing time: Thu 24 Sep 2026 21:08:33 +0000 Manifest this update: Thu 24 Sep 2026 21:08:32 +0000 Manifest next update: Thu 01 Oct 2026 21:08:32 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: Q2YTBb4XguggEbL/a6M9vZDV9PmXy587wnuHYBUixlY=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: l3JeAQ3S0YOaZPvLg1VADUfgUPauzx1iQ/ocLZ5FTmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Sep 24 21:08:32 2026 GMT Not After : Oct 1 21:08:32 2026 GMT Subject: CN=6ab59150-f479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:d6:68:cc:12:bd:01:c3:75:94:ce:9b:0b: fd:e7:97:b6:df:2f:76:4b:7b:21:c7:71:74:82:51: 2b:a7:9a:19:59:6c:ba:aa:b0:b6:b3:53:4e:cd:07: 51:89:ca:e9:3f:1a:b1:a3:4c:d7:a6:d7:d2:07:8b: cb:ed:98:33:9e:ed:98:56:a7:cf:6a:62:2a:f3:6b: d8:67:f0:5b:52:7f:ef:5d:a4:02:bf:e0:d3:b5:06: fb:aa:e7:fa:6f:dc:7e:44:28:09:2e:7e:20:4c:91: d9:50:dd:5f:f1:e7:33:e4:61:b9:f7:a8:32:a8:57: 53:bc:01:0c:ef:0b:e3:63:70:52:f3:c8:29:45:42: de:c8:3b:50:67:82:a7:0c:86:2a:46:a8:5c:7f:70: 29:16:75:f6:a1:e1:63:e5:8d:83:7a:a6:25:0e:dd: e3:b8:1c:bc:8c:53:4b:45:c4:41:00:85:e4:dd:21: 41:15:ac:13:ee:75:4d:c0:53:a7:ff:91:6c:78:09: 7e:6a:49:61:94:5b:85:78:e8:ff:00:9f:d5:29:65: 4c:54:2e:bb:e7:07:31:a0:96:ee:0a:09:c8:a6:5e: b6:13:46:ad:c0:be:42:7c:a9:f4:59:f2:fe:76:54: bf:85:09:c8:c2:8e:2a:5f:77:62:5f:8c:a6:5e:ea: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CA:B0:95:C2:84:BE:66:A5:56:A4:38:45:1C:62:B2:0C:27:03:50 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:97:c5:93:ba:f8:c8:e5:88:72:b1:de:4e:ac:7c:f6:e0:e9: e4:96:3e:dd:6c:76:ec:57:c6:8f:c0:63:e3:c5:87:d7:22:2f: a7:28:06:8b:bb:5b:87:06:5f:66:4a:5d:52:b2:bd:e6:44:19: c5:69:e0:4b:16:83:44:9e:6e:f0:df:1b:1c:7e:bd:4d:53:85: 89:64:f9:82:e1:d5:fd:a1:9d:7c:0d:dd:37:77:f0:a2:29:d9: dd:55:6b:65:95:43:60:a1:fc:ec:67:62:08:76:17:88:75:55: 81:a6:99:63:d3:d0:2e:43:5a:70:86:7c:8d:21:a3:44:56:ef: 41:ab:5b:d4:71:0e:e4:72:c5:6d:b5:f6:b2:e5:ea:0a:6e:72: fe:38:15:09:7c:30:88:e5:5c:a1:a6:bc:b4:bd:81:89:30:81: 3f:9c:f0:da:37:35:28:5e:bf:0a:24:19:43:d3:f6:59:ae:e6: fc:56:e5:7b:39:d2:06:34:d4:b6:f7:8d:5e:dd:ac:73:b4:e0: 49:0e:e7:27:24:84:53:4a:d8:b6:ff:9c:20:9b:3d:a0:26:e3: 60:97:3e:cb:2a:5f:74:55:7d:53:c7:1d:28:12:d1:11:dc:ee: 00:35:43:ca:a5:8b:f2:50:f6:43:1b:0e:ff:b0:9b:50:e6:7a: 79:8e:eb:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjYwOTI0MjEwODMyWhcNMjYxMDAxMjEwODMyWjAYMRYwFAYD VQQDEw02YWI1OTE1MC1mNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOnWaMwSvQHDdZTOmwv955e23y92S3shx3F0glErp5oZWWy6qrC2s1NOzQdR icrpPxqxo0zXptfSB4vL7Zgznu2YVqfPamIq82vYZ/BbUn/vXaQCv+DTtQb7quf6 b9x+RCgJLn4gTJHZUN1f8ecz5GG596gyqFdTvAEM7wvjY3BS88gpRULeyDtQZ4Kn DIYqRqhcf3ApFnX2oeFj5Y2DeqYlDt3juBy8jFNLRcRBAIXk3SFBFawT7nVNwFOn /5FseAl+aklhlFuFeOj/AJ/VKWVMVC675wcxoJbuCgnIpl62E0atwL5CfKn0WfL+ dlS/hQnIwo4qX3diX4ymXupkmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjKsJXC hL5mpVakOEUcYrIMJwNQMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP5fFk7r4yOWIcrHeTqx89uDp5JY+3Wx27FfGj8Bj48WH1yIvpygGi7tbhwZf ZkpdUrK95kQZxWngSxaDRJ5u8N8bHH69TVOFiWT5guHV/aGdfA3dN3fwoinZ3VVr ZZVDYKH87GdiCHYXiHVVgaaZY9PQLkNacIZ8jSGjRFbvQatb1HEO5HLFbbX2suXq Cm5y/jgVCXwwiOVcoaa8tL2BiTCBP5zw2jc1KF6/CiQZQ9P2Wa7m/FbleznSBjTU tveNXt2sc7TgSQ7nJySEU0rYtv+cIJs9oCbjYJc+yypfdFV9U8cdKBLREdzuADVD yqWL8lD2QxsO/7CbUOZ6eY7rrg== -----END CERTIFICATE-----Generated at Fri Sep 25 08:46:57 2026 by rpki-client